[Bugs] [Bug 1489417] New: Gerrit shouldn't offer http or git for code download

bugzilla at redhat.com bugzilla at redhat.com
Thu Sep 7 12:15:58 UTC 2017


https://bugzilla.redhat.com/show_bug.cgi?id=1489417

            Bug ID: 1489417
           Summary: Gerrit shouldn't offer http or git for code download
           Product: GlusterFS
           Version: mainline
         Component: project-infrastructure
          Assignee: bugs at gluster.org
          Reporter: mscherer at redhat.com
                CC: bugs at gluster.org, gluster-infra at gluster.org



git protocol is in clear text, s we should avoid it since a attackant could do
mitm and inject code that will be built (and likely executed) on user system.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the Bugs mailing list